ANS-C01 Practice Test 8 — 10 Questions

Question 1

Match each AWS networking feature to its use case for hybrid connectivity.

Question 2

Match each AWS Direct Connect term to its definition.

Question 3

Match each AWS networking monitoring or troubleshooting tool to its primary purpose.

Question 4

Match each AWS service or feature to its primary function in network architecture.

Question 5

Match each AWS networking service to the OSI layer it primarily operates at.

Question 6

A company has a Direct Connect connection with a private virtual interface (VIF) to a VPC. The company wants to use the same Direct Connect connection to access multiple VPCs in the same AWS Region. Which solution should the company implement?

Accepted Answer

Create a transit virtual interface on the Direct Connect connection and associate it with a Direct Connect gateway.. Option B is correct because a transit virtual interface (VIF) on a Direct Connect connection can be associated with a Direct Connect gateway, which enables connectivity to multiple VPCs in the same AWS Region. The Direct Connect gateway acts as a hub, allowing the single physical connection to route traffic to multiple VPCs via the transit VIF, without needing separate private VIFs for each VPC.

Answer

Use a public virtual interface and route traffic through the internet.

Answer

Request a hosted virtual interface from an AWS Direct Connect partner.

Answer

Create additional private virtual interfaces for each VPC.

Question 7

A company is designing a hybrid network architecture that connects an on-premises data center to AWS using AWS Direct Connect. The company requires high availability and uses BGP for dynamic routing. The on-premises router supports BGP multipath. Which configuration ensures the highest availability for the Direct Connect connection?

Accepted Answer

Provision two Direct Connect connections to two different Direct Connect locations and configure BGP multipath.. Option A is correct because provisioning two Direct Connect connections to two different Direct Connect locations eliminates single points of failure at the physical layer and the facility level. BGP multipath allows the on-premises router to load-balance traffic across both connections, maximizing availability by ensuring that if one connection or location fails, traffic continues over the other without relying on a slower failover mechanism like VPN.

Answer

Provision a single Direct Connect connection and a Site-to-Site VPN as a backup.

Answer

Provision a single Direct Connect connection with two virtual interfaces.

Answer

Provision a single Direct Connect connection with multiple VLANs.

Question 8

A company is designing a multi-region architecture with an Application Load Balancer (ALB) in us-east-1 and a Network Load Balancer (NLB) in eu-west-1. They need to route traffic from the ALB to the NLB using a fixed IP address. Which AWS service should be used to provide a static IP for the NLB and enable cross-region load balancing?

Accepted Answer

AWS Global Accelerator. AWS Global Accelerator provides two static anycast IP addresses that serve as a fixed entry point for traffic. It can route traffic from the ALB in us-east-1 to the NLB in eu-west-1 by using an endpoint group that includes the NLB's IP address, enabling cross-region load balancing with a static IP. This allows the ALB to forward traffic to the Global Accelerator's static IP, which then optimally routes to the NLB in the other region.

Answer

AWS WAF

Answer

Amazon CloudFront

Answer

AWS Transit Gateway

Question 9

A company has a Direct Connect connection with a private VIF to a VPC. They want to add a second Direct Connect connection for redundancy. Both connections will terminate at the same Direct Connect gateway. Which TWO steps are required to enable BGP multipath (ECMP) across the two connections?

Accepted Answer

Ensure the same customer-side ASN is used on both virtual interfaces.. To enable BGP multipath (ECMP) across two Direct Connect connections terminating on the same Direct Connect gateway, you must use the same customer-side ASN on both virtual interfaces. This allows the Direct Connect gateway to treat both paths as equal-cost routes. Additionally, you must advertise the same BGP prefixes on both virtual interfaces so that the gateway sees identical routes from both paths and can load-balance traffic across them.

Answer

Use a different autonomous system number (ASN) on each virtual interface.

Answer

Advertise different BGP prefixes on each virtual interface.

Answer

Attach each virtual interface to a different VPC.

Question 10

A company is designing a network for a multi-account AWS environment using AWS Organizations. They need to establish a central inspection VPC for traffic inspection using a Gateway Load Balancer (GWLB). Traffic from all other VPCs should be routed through the inspection VPC before reaching the internet or on-premises. Which architecture should be used?

Accepted Answer

Use AWS Transit Gateway with a centralized inspection VPC that hosts a GWLB. Configure route tables on the Transit Gateway to send traffic to the GWLB endpoint.. Option C is correct because AWS Transit Gateway enables centralized routing between multiple VPCs, and when combined with a Gateway Load Balancer (GWLB) in an inspection VPC, it allows traffic from all other VPCs to be forwarded to the GWLB for inspection before reaching the internet or on-premises. Transit Gateway route tables can be configured with static routes pointing to the GWLB endpoint (using Gateway Load Balancer Endpoint service), ensuring all inter-VPC and egress traffic is steered through the inspection VPC. This architecture scales efficiently across many VPCs in an AWS Organizations multi-account setup without requiring complex peering or direct connections.

Answer

Use VPC Peering to connect all VPCs to the inspection VPC and configure routes to the GWLB.

Answer

Use AWS Direct Connect Gateway to connect all VPCs and route traffic through the inspection VPC.

Answer

Use AWS Network Firewall in each VPC and route traffic to it.